
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
A real Mac for your coding agent: build, test, run, and tap through iOS apps from any machine. CLI and MCP server.

A real Mac for your coding agent. macbox lets Claude Code, Codex, Cursor, or any MCP client build, test, run, and tap through native iOS apps on a real Mac in the cloud, from any machine, including Linux boxes and cloud agent sandboxes.
xcodebuild and your XCTest and UI tests, on a Mac mini running the
latest Xcode. Your agent gets the results and the error lines.Pay per Mac minute, whole minutes only: $0.05, and a job under a minute is free. Get access and free credit at macbox.build.
The quickest way: tell your agent
Set up macbox by following https://api.macbox.build/guide/
Or pick your client:
Claude Code (plugin: skill + MCP tools)
claude plugin marketplace add opslane/macbox-agent
claude plugin install macbox@macbox
Any MCP client (Codex, Cursor, Claude Desktop, VS Code, ...), with Node 18+:
{
"mcpServers": {
"macbox": { "command": "npx", "args": ["-y", "macbox", "mcp"] }
}
}
The CLI (macOS or Linux):
curl -fsSL https://api.macbox.build/install.sh | sh
macbox login
macbox setup # installs the skill for Claude Code and Codex, and notes in CLAUDE.md / AGENTS.md
Log in with macbox login, or set MACBOX_API_KEY (in a cloud agent, as an environment
secret).
| MCP tool | CLI | What it does |
|---|---|---|
build | macbox build | Build for the iOS simulator (or macOS, for a Mac app) |
test | macbox test | Run tests on a fresh simulator; one PASS/FAIL line per test |
screenshot | macbox screenshot | Launch the last build and return a picture |
run | macbox run | Launch the app and keep it running; returns a live link |
describe, tap, type, swipe, press_button, look | macbox ui ... | Use the running app like a person |
stop | macbox stop | End the running app |
report_problem | macbox feedback | Tell the macbox team when something on our side is wrong |
For deeper work there is also macbox mcp --xcode: Sentry's open-source
MobileBuildMCP Xcode tools (LLDB debugging, Swift packages,
simulator settings), running on the macbox Mac.
macbox sends the files git tracks (never .env files unless you ask) to one Mac mini,
into your own macOS VM that only you use and that can't reach other VMs or our network.
Only changed files are sent after the first time, and the build cache stays, so the second
build is fast. Native iOS apps work today: Xcode projects and workspaces, Swift packages,
CocoaPods, XcodeGen. Not yet: signing, TestFlight, React Native, Flutter.
Full guide: https://api.macbox.build/guide/ · Questions: Discord
The open parts of macbox: the Claude Code plugin (.claude-plugin/, skills/, .mcp.json),
the macbox npm package (npm/, which downloads the CLI from api.macbox.build and checks
it against the published SHA256SUMS), and the MCP Registry entry (server.json). The macbox
service itself runs on our Macs.
MIT licensed.
FAQs
A real Mac for your coding agent: build, test, run, and tap through iOS apps from any machine. CLI and MCP server.
The npm package macbox receives a total of 0 weekly downloads. As such, macbox popularity was classified as not popular.
We found that macbox demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.